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CLAIMS 

A method of providing a netWork service including: 

implementing a forwarding agent on a router wherein the forwarding agent 
is operative to receive instructions from a service manager; 

forwarding packets/from the forwarding agent to the service manager; and 

receiving instructions at the forwarding agent from the service manager 
detailing how to handle the forwarded packets. 

2. A method of providing a network service as recited in claim 1 wherein the 
forwarding agent forwards ^ackets to the service manager using UDP. 

3 . A method of providing a network service including: 



receiving/packet interest instructions from a service manager at a 
forwarding agent specifying packets that the forwarding agent is instructed to send to the 
service manager; 

receiving an initial packet at a forwarding agent that matches one of the 
packets specified in^the packet interest instructions from the service manager; and 

sending the initial packet from the forwarding agent to the service 
manager so that the packet may be processed at the service manager to determine actions 
that are to be performed for the packet. 



Attorney Docket No. CISCP521 



71 



PATENT 



4. A method of providing a network service as recited in claim 3 further including: 

receiving packet handling instructions from the service manager at the 
forwarding agent that incluae the actions determined by the service manager for the 
packet. / 

5 5. A method of providing a network service as recited in claim 4 wherein receiving 
packet handling instructions from the service manager at the forwarding agent that 
include the actions determined by the service manager for the packet includes receiving a 
UDP packet at the forwarding agent. 

6. A method of ^providing a network service as recited in claim 4 further including: 

10 receiving the initial packet from the service manager back at the 

forwarding agent along with the packet handling instructions; and 

handling the packet at the forwarding agent according to the packet 
handling instructions. 
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7. A method of providing a/network service as recited in claim 6 wherein handling 
the packet at the forwarding agent according to the packet handling instructions includes 
translating the destination IP address in the packet so that the packet is forwarded to a 
different EP address than th^IP address originally included in the packet header. 



5 8. A method of providing a network service as recited in claim 6 wherein handling 
the packet at the forwarding agent according to the packet handling instructions includes 
sending the packet to a destination specified in the packet handling instructions using tag 
switching. 

9. A method of providing a network service as recited in claim 6 wherein handling 
10 the packet at the forwarding agent according to the packet handling instructions includes 

> a destination specified in the packet handling using IP tunneling 



sending the packet to 



10. A method of providing a network service as recited in claim 4 further including: 



ill 



receiving a subsequent packet at the forwarding agent; 

determining that the subsequent packet matches a criteria included in the 
1 5 packet handling instructions; and 

handling the packet at the forwarding agent according to the packet 
handling instructions. 
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11. A method of providing a network service as recited in claim 3 further including 
forwarding the packet from the service manager to a destination other than the 
forwarding agent, the destination being determined by the service manager. 

12. A method of providing a network service as recited in claim 1 1 wherein 
5 forwarding the packet from the service manager to a destination other than the 

forwarding agent includes translating the destination IP address in the packet. 

13. A method of providing a network service as recited in claim 1 1 wherein 
forwarding the packet from tine service manager to a destination other than the 
forwarding agent includes pending the packet to the destination using tag switching. 

10 14. A method of providing a network service as recited in claim 1 1 wherein 
forwarding the packet from the service manager to a destination other than the 
forwarding agent includes sending the packet to the destination using IP tunneling. 

15. A methodyof providing a network service as recited in claim 3 wherein the 
forwarding agent is implemented on a router. 

15 16. A mepod of providing a network service as recited in claim 3 wherein the 
forwarding agent is implemented on a switch. 



20 



17. Ayinethod of providing a network service as recited in claim 3 wherein receiving 
packet interest instructions from a service manager at a forwarding agent specifying 
packets that the forwarding agent is instructed to send to the service manager includes 
receiving a multicast of the packet interest instructions sent to a plurality of forwarding 
agents. 
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18. A method of providing a network service as recited in claim 17 further including 
receiving unicast packet handling instructions from the service manager at the forwarding 
agent that include the actions determined by the service manager for the packet. 



19. A method of providing a network service as recited in claim 17 further including 
receiving multicast packet handling instructions from the service manager at the plurality 
of forwarding agents that include the actions determined by the service manager for the 
packet. 



20. A method of providing a network service as recited in claim 3 further including 
specifying packets that the forwaraing agent is instructed to send to the service manager 
10 includes receiving a UDP packet at the forwarding agent. 



21. A method of providing a Network service as recited in claim 3 wherein receiving 
packet interest instructions from a service manager at a forwarding agent includes 
receiving a wildcard affinity at/the forwarding agent. 

22. A method of providing a network service as recited in claim 21 wherein the 
15 wildcard affinity includes a source IP address, a destination IP address, a source port 

number, and a destination port number. 



23 . A method of pro v^ 
wildcard affinity further 



vijding 



a network service as recited in claim 22 wherein the 
includes a protocol identifier. 



24. A method of providing a network service as recited in claim 22 wherein the 
20 wildcard affinity sourc/ IP address includes a plurality of IP addresses. 

25. A method otfproviding a network service as recited in claim 22 wherein the 
wildcard affinity destination IP address includes a plurality of IP addresses. 
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26. A method of providing a network service as recited in claim 22 wherein the 
wildcard affinity destination port includes a plurality of ports. 

27. A method of providing a network service as recited in claim 22 wherein the 
wildcard affinity source port includes a plurality of ports. 

'ork service as recited in claim 22 wherein the 
Lcludes a range of EP addresses. 

29. A method of providing a network service as recited in claim 22 wherein the 
wildcard affinity destination IP address includes a range of IP addresses. 

30. A method of providing ^network service as recited in claim 22 wherein the 
10 wildcard affinity destination port includes a range of ports. 

31. A method of providing a network service as recited in claim 22 wherein the 
wildcard affinity source port /includes a range of ports. 

32. A method of providing a network service as recited in claim 22 wherein the 
wildcard affinity source IF address specifies a set of IP addresses by using a mask. 

15 33. A method of providing a network service as recited in claim 22 wherein the 
wildcard affinity destination IP address specifies a set of IP addresses by using a mask. 

34. A method of providing a network service as recited in claim 3 wherein the action 
determined is translating the destination IP address of the initial packet. 



5 28. A method of providing a net 
wildcard affinity source IP address : 
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35. A method of providing a network service as recited in claim 3 wherein the action 
determined is forwarding the initial packet to a destination different than the destination 
IP address of the initial packet. I 

vork service as recited in claim 3 wherein the action 
racket without changing the initial packet and 
:et to the service manager. 

37. A method of providing a nejtwork service as recited in claim 3 wherein the action 
determined is translating the sourcje IP address of the initial packet. 

38. A forwarding agent comprising: 

10 a service manage^ receiving interface for receiving instructions from a 

service manager specifying actions to be performed for server designated packets ; 

a service manager sending interface for sending packets to the service 
manager; / 

a network packet receiving interface for receiving IP packets from a 
15 network; / 

a network packet forwarding interface for forwarding IP packets to the 
network; / 

a processor for performing the specified actions on the server designated 
packets. / 



36. A method of providing a net 
5 determined is forwarding the initial 
reporting information about the pac] 
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39. A forwarding agent as reaited in claim 38 further including a service manager 
instruction storage for storing thi service manager instructions. 

40. A forwarding agent as recited in claim 39 wherein the service manager instruction 
storage includes a general instruction storage that stores criteria for forwarding packets to 

5 the service manager and a specific instruction storage that stores specific instructions for 
handling server designated packets. 

41 . A forwarding agent as /recited in claim 39 further including a comparator for 
comparing portions of newly received packets to the stored criteria. 

42. A forwarding agent as recited in claim 39 wherein the stored criteria are affinities. 
10 43. A forwarding agent! as recited in claim 38 wherein the stored criteria are affinities. 

44. A forwarding agent as recited in claim 38 wherein the stored criteria are source IP 
address, destination IP address, source port and destination port. 

45. A forwarding agent as recited in claim 38 wherein the server designated packets 
are designated by affinities. 

15 46. A forwarding agent as recited in claim 38 wherein the server designated packets 
are designated by source IP address, destination IP address, source port and destination 
port. / 

47. A forwarding agent as recited in claim 38 wherein the service manager receiving 
interface and tMe network packet receiving interface are the same interface. 
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48. A computer program produdt for handling packets, the computer program product 
being embodied in a computer readable medium and comprising computer instructions 
for: 

implementing a forwarding agent on a router wherein the forwarding agent 
5 is operative to receive instructions from a service manager; 

forwarding packefts from the forwarding agent to the service manager; and 

receiving instructions at the forwarding agent from the service manager 
detailing how to handle the forwarded packets. 

49. A computer programmroduct for providing a network service, the computer 
10 program product being embodied in a computer readable medium and comprising 

computer instructions for: 

receiving packet interest instructions from a service manager at a 
forwarding agent specifying packets that the forwarding agent is instructed to send to the 
service manager; 

15 receiving an initial packet at a forwarding agent that matches one of the 

packets specified in the packet interest instructions from the service manager; and 

sending the initial packet from the forwarding agent to the service 
manager so that the packet may be processed at the service manager to determine actions 
that are to be performed for the packet. 
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50. A computer prograni product for providing a network service as recited in claim 

49, the computer program product further comprising computer instructions for: 

/ \. 

(acket handling instructions from the service manager at the 
[ude the actions determined by the service manager for the 

51. A computer program product for providing a network service as recited in claim 
50 wherein receiving packet handling instructions from the service manager at the 
forwarding agent thatr include the actions determined by the service manager for the 
packet includes receiving a UDP packet at the forwarding agent. 

10 52. A computer program product for providing a network service as recited in claim 

50, the computer rorogram product further comprising computer instructions for: 

receiving the initial packet from the service manager back at the 
forwarding agent along with the packet handling instructions; and 

/handling the packet at the forwarding agent according to the packet 
1 5 handling instructions . 




receiving ; 
forwarding agent that inc; 
5 packet. 
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53. A computer program product for providing a network service as recited in claim 
52 wherein handling the packet at tine forwarding agent according to the packet handling 
instructions includes translating the destination IP address in the packet so that the packet 
is forwarded to a different IP address than the IP address originally included in the packet 

5 header. / 

54. A computer program product for providing a network service as recited in claim 
52 wherein handling the packetf at the forwarding agent according to the packet handling 
instructions includes sending the packet to a destination specified in the packet handling 
instructions using tag switching. 

10 55. A computer program product for providing a network service as recited in claim 
52 wherein handling the packet at the forwarding agent according to the packet handling 
instructions includes sending the packet to a destination specified in the packet handling 
using IP tunneling / 

56. A computer program product for providing a network service as recited in claim 
15 50, the computer program product further comprising computer instructions for: 

receiving a subsequent packet at the forwarding agent; 

determining that the subsequent packet matches a criteria included in the 
packet handling instructions; and 

handling the packet at the forwarding agent according to the packet 
20 handling instructions. 
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57. A computer program product for providing a network service as recited in claim 
49, the computer program product further comprising computer instructions for 
forwarding the packet from the service manager to a destination other than the 
forwarding agent, the destination being determined by the service manager. 

5 58. A computer program product for providing a network service as recited in claim 
57 wherein forwarding the packet from the service manager to a destination other than 
the forwarding agent includes translating the destination IP address in the packet. 

59. A computer program product for providing a network service as recited in claim 
57 wherein forwarding the packet from the service manager to a destination other than 

10 the forwarding agent includes sending the packet to the destination using tag switching. 

60. A computer program Product for providing a network service as recited in claim 
57 wherein forwarding the packet from the service manager to a destination other than 
the forwarding agent includes sending the packet to the destination using IP tunneling. 

61. A computer program product for providing a network service as recited in claim 
15 49 wherein the forwarding agent is implemented on a router. 

62. A computer p/ogram product for providing a network service as recited in claim 
49 wherein the forwarding agent is implemented on a switch. 

63. A computer program product for providing a network service as recited in claim 
49 wherein receiving packet interest instructions from a service manager at a forwarding 

20 agent specifyinspackets that the forwarding agent is instructed to send to the service 
manager includes receiving a multicast of the packet interest instructions sent to a 
plurality of forwarding agents. 
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64. A computer program product for providing a network service as recited in claim 
63, the computer program product furtner comprising computer instructions for receiving 
unicast packet handling instructions from the service manager at the forwarding agent 
that include the actions determined by i he service manager for the packet. 

5 65. A computer program product for providing a network service as recited in claim 
63, the computer program product flirt ler comprising receiving multicast packet handling 
instructions from the service manager kt the plurality of forwarding agents that include 
the actions determined by the service manager for the packet. 

66. A computer program producti for providing a network service as recited in claim 
10 49, the computer program product further comprising computer instructions for 

specifying packets that the forwarding agent is instructed to send to the service manager 
includes receiving a UDP packet at the forwarding agent. 

67. A computer program product for providing a network service as recited in claim 
49 wherein receiving packet interest instructions from a service manager at a forwarding 

1 5 agent includes receiving a wildcard affinity at the forwarding agent. 

68. A computer program product for providing a network service as recited in claim 

67 wherein the wildcard affinity/ includes a source IP address, a destination IP address, a 
source port number, and a destination port number. 

69. A computer program product for providing a network service as recited in claim 
20 68 wherein the wildcard affinity further includes a protocol identifier. 

70. A computer program/ product for providing a network service as recited in claim 

68 wherein the wildcard affinity source IP address includes a plurality of IP addresses. 
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71 . A computer program product for providing a network service as recited in claim 
68 wherein the wildcard affinity destination IP address includes a plurality of IP 
addresses. 

72. A computer program product for providing a network service as recited in claim 
5 68 wherein the wildcard affinity destination port includes a plurality of ports. 

73. A computer program product for providing a network service as recited in claim 
68 wherein the wildcard affinity source port includes a plurality of ports. 

74. A computer program product foi- providing a network service as recited in claim 
68 wherein the wildcard affinity sourcjs IP address includes a range of IP addresses. 

10 75. A computer program product for providing a network service as recited in claim 
68 wherein the wildcard affinity destination IP address includes a range of IP addresses. 

76. A computer program product for providing a network service as recited in claim 
68 wherein the wildcard affinity cjfestination port includes a range of ports. 

77. A computer program profduct for providing a network service as recited in claim 
15 68 wherein the wildcard affinity source port includes a range of ports. 

78. A computer progranyjsroduct for providing a network service as recited in claim 
68 wherein the wildcard affinity source IP address specifies a set of IP addresses by 
using a mask. 



79. A computer Program product for providing a network service as recited in claim 
20 68 wherein the \yildcard affinity destination IP address specifies a set of IP addresses by 
using a mask v 
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80. A computer program product for providing a network service as recited in claim 
49 wherein the action determined is translating the destination IP address of the initial 
packet. / 

81 . A computer program product /for providing a network service as recited in claim 
49 wherein the action determined is forwarding the initial packet to a destination different 
than the destination IP address of tne initial packet. 

82. A computer program product for providing a network service as recited in claim 
49 wherein the action determined is forwarding the initial packet without changing the 
initial packet and reporting information about the packet to the service manager. 

83. A computer program product for providing a network service as recited in claim 
49 wherein the action determined is translating the source IP address of the initial packet. 
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